Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39342e3130312e3131342e302f32342d3234203d3e20313336373837.roa
File: 39342e3130312e3131342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 9rxU9j+x/B/diCnshaC4XzRU4iLVUSTLBm/f3BkOHWM=
Subject key identifier: 7F:E0:70:81:14:1F:1E:2E:AF:F8:1A:09:D8:87:39:91:1F:54:5C:80
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 4A2466C477BE5377063E0B27EFC8F4BCA2F47310
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39342e3130312e3131342e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 01 Apr 2024 14:03:20 +0000
ROA not before: Mon 01 Apr 2024 13:58:20 +0000
ROA not after: Mon 31 Mar 2025 14:03:20 +0000
asID: 136787
IP address blocks: 94.101.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:24:66:c4:77:be:53:77:06:3e:0b:27:ef:c8:f4:bc:a2:f4:73:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Apr 1 13:58:20 2024 GMT
Not After : Mar 31 14:03:20 2025 GMT
Subject: CN=7FE07081141F1E2EAFF81A09D88739911F545C80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:20:25:9e:2e:7c:58:b4:13:a8:a3:c7:c8:
05:96:5f:25:a7:14:c2:58:b3:cb:03:de:ee:8c:41:
a8:a4:50:2e:20:5d:d1:cf:49:fe:50:73:9e:04:66:
02:27:18:39:ce:67:15:d2:60:05:8d:ee:84:90:8e:
dd:55:dd:0b:be:39:ae:42:70:35:b0:40:09:eb:ca:
27:b5:94:a2:3c:5e:bb:01:07:b7:37:69:72:57:36:
0d:93:70:ed:e9:f0:06:d0:4b:f7:43:8d:22:64:57:
2d:01:06:6f:18:1f:31:69:eb:53:43:57:aa:d9:d9:
06:bd:62:0c:b8:25:04:f6:8c:c0:60:17:f5:c4:f3:
f1:d8:b5:bb:bd:0d:fe:12:cb:a1:42:c4:0d:f2:23:
b3:66:63:06:61:1e:79:3f:d0:5a:fc:a5:05:1c:e6:
2e:ab:0b:9a:e4:a5:49:dd:97:f0:9e:ef:51:fc:1a:
fa:5a:44:21:68:e7:f6:9e:7c:80:0b:c1:a7:8c:7c:
b3:62:14:ad:e7:39:c8:91:3b:c3:90:34:9e:a9:5b:
f2:b0:83:03:ae:49:da:35:10:28:b3:a3:23:a4:c8:
28:73:0e:90:39:61:ed:65:ac:04:98:b7:bb:12:1f:
b6:88:c4:63:3c:69:2c:7a:9f:05:87:4a:8f:b7:60:
4d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E0:70:81:14:1F:1E:2E:AF:F8:1A:09:D8:87:39:91:1F:54:5C:80
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39342e3130312e3131342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.114.0/24
Signature Algorithm: sha256WithRSAEncryption
45:bb:2d:49:c3:5e:7b:d3:85:67:4a:b9:42:c7:a5:44:6f:af:
be:4a:5d:9f:cd:c1:b5:58:cb:32:ed:e2:e6:78:8d:d6:c9:29:
7f:0e:7c:7f:c9:32:b2:d1:ca:e2:3e:2a:91:df:14:5e:09:fa:
ea:f1:a0:8a:0b:4c:98:5f:23:8a:d9:4f:60:77:c4:5a:68:03:
71:ea:bf:2d:63:6e:dc:65:44:93:e8:2f:04:9b:b9:e5:d3:91:
4c:3f:10:af:cd:49:4b:e9:89:6c:04:52:12:e5:39:84:eb:8f:
57:6d:28:1c:e4:1c:ff:a4:5a:7a:9a:02:f9:3e:5c:25:9d:10:
16:40:82:a1:ab:b9:b3:49:25:67:aa:65:d2:c7:90:27:3f:f3:
6b:87:41:63:ac:87:67:59:5a:fa:39:c6:cc:66:68:2f:a2:3a:
64:dd:e8:9b:aa:d2:ac:c2:83:ac:26:e8:37:4b:0e:90:b1:65:
dc:7d:c6:2e:d2:a8:68:fe:e5:6f:0f:60:83:41:6b:bb:34:d5:
44:62:6d:5c:aa:59:ae:62:b7:89:a4:02:a2:80:22:a0:72:7d:
76:23:c7:6c:1b:e4:7b:17:a1:55:ca:04:7c:88:60:14:bd:de:
98:e7:8f:8d:ca:a0:42:b8:f1:96:9c:95:df:e6:19:dd:e2:6c:
97:a2:82:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:39:35 2024 by rpki-client on console-fra.rpki-client.org